Flash Player < 30.0.0.154 Multiple Vulnerabilities (APSB18-25)

Binary data 700436.prm...

Flash Player < 27.0.0.170 RCE (APSB17-32)

Binary data 700426.prm...

Flash Player < 29.0.0.113 Multiple RCE (APSB18-05)

Binary data 700431.prm...

Flash Player < 31.0.0.108 Information Disclosure (APSB18-31)

Binary data 700437.prm...

Flash Player < 30.0.0.113 Multiple Vulnerabilities (APSB18-19)

Binary data 700434.prm...

Flash Player < 28.0.0.161 Multiple RCE (APSB18-03)

Binary data 700430.prm...

Flash Player < 29.0.0.140 Multiple Vulnerabilities (APSB18-08)

Binary data 700432.prm...

Flash Player < 28.0.0.137 Information Disclosure (APSB18-01)

Binary data 700429.prm...

Flash Player < 29.0.0.171 RCE (APSB18-16)

Binary data 700433.prm...

Flash Player < 31.0.0.148 Information Disclosure (APSB18-39)

Binary data 700438.prm...

Flash Player < 28.0.0.126 Business Logic Error (APSB17-42)

Binary data 700428.prm...

Flash Player < 31.0.0.153 RCE (APSB18-44)

Binary data 700439.prm...

Flash Player < 30.0.0.134 Multiple Vulnerabilities (APSB18-24)

Binary data 700435.prm...

Flash Player < 27.0.0.187 Multiple Vulnerabilities (APSB17-33)

Binary data 700427.prm...

Microsoft Edge - Flash click2play Bypass with CObjectElement::FinalCreateObject

Microsoft Edge - Flash click2play Bypass with CObjectElement::FinalCreateObject Attached is a PoC file that bypasses Flash click2play in Microsoft Edge. This was tested on Windows 10 64bit v 1809 with the latest patches applied. The PoC currently loads a swf from wwwimages.adobe.com screenshot...

Microsoft Edge - Flash click2play Bypass with CObjectElement::FinalCreateObject Exploit

Microsoft Edge - Flash click2play Bypass with CObjectElement::FinalCreateObject Exploit Attached is a PoC file that bypasses Flash click2play in Microsoft Edge. This was tested on Windows 10 64bit v 1809 with the latest patches applied. The PoC currently loads a swf from wwwimages.adobe.com...

Microsoft Edge - Flash click2play Bypass with CObjectElement::FinalCreateObject

Attached is a PoC file that bypasses Flash click2play in Microsoft Edge. This was tested on Windows 10 64bit v 1809 with the latest patches applied. The PoC currently loads a swf from wwwimages.adobe.com screenshot attached, but can load a swf from any domain and also the PoC itself can be hosted...

USN-3910-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the f2fs filesystem implementation in the Linux kernel did not handle the noflushmerge mount option correctly. An attacker could use this to cause a denial of service system crash. CVE-2017-18241 It was discovered that the procfs filesystem did not properly handle processes...

USN-3910-2 linux-lts-xenial, linux-aws vulnerabilities

USN-3910-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that the f2fs filesystem implementation in the Linux kernel did not...

Patch Tuesday, March 2019 Edition

Microsoft on Tuesday pushed out software updates to fix more than five dozen security vulnerabilities in its Windows operating systems, Internet Explorer, Edge, Office and Sharepoint. If you abuse Microsoft products, it's time once again to start thinking about getting your patches on. Malware or...